General
- Target 2026-06-28_822e94137369a71bbea32eb2194cb7a9_elex_mafia_stealc_tofsee
- Size 435KB
- Sample260628-z3llfset6s
- SHA256 91a7009364533b216517d7b20510b7911a71df4599916ff0ed2ded3edd66f3f9
- MD5 822e94137369a71bbea32eb2194cb7a9
- SHA1 ad8536453fdaf30264f133f8b689eaf6cbd48f40
- SHA512 090b8391a94a039fa834399001cf162399f7c4ba6d7af5abffe9b0cab63aea44d3afc49ad01dc14bd88b995a2f4e7abf88f2ef8ea22b2e1e82fc209f4d42c4d8
- SSDEEP 6144:fJvyW4ojUnQjx4qePix+qXQjBYqyRB3oGs97aedytw3wK43kGg+UqdQrViw9J:fd4x+ePixnXQjYjBsFaedyWE3VOiwP
- TLSH T13A94E0303696C037E1E705348AE5CB69592A7DB04B32A4C73BC42BAA6FB52D1DB34357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_822e94137369a71bbea32eb2194cb7a9_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_822e94137369a71bbea32eb2194cb7a9_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260617-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_822e94137369a71bbea32eb2194cb7a9_elex_mafia_stealc_tofsee
- Size 435KB
- SHA256 91a7009364533b216517d7b20510b7911a71df4599916ff0ed2ded3edd66f3f9
- MD5 822e94137369a71bbea32eb2194cb7a9
- SHA1 ad8536453fdaf30264f133f8b689eaf6cbd48f40
- SHA512 090b8391a94a039fa834399001cf162399f7c4ba6d7af5abffe9b0cab63aea44d3afc49ad01dc14bd88b995a2f4e7abf88f2ef8ea22b2e1e82fc209f4d42c4d8
- SSDEEP 6144:fJvyW4ojUnQjx4qePix+qXQjBYqyRB3oGs97aedytw3wK43kGg+UqdQrViw9J:fd4x+ePixnXQjYjBsFaedyWE3VOiwP
- TLSH T13A94E0303696C037E1E705348AE5CB69592A7DB04B32A4C73BC42BAA6FB52D1DB34357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.